There are several ways to create the Windows installer for Agent and ESET security product:
•Quick Links > Deploy Agent
•Installers > Create Installer
•ESET PROTECT On-Prem Tour
Click Windows > Download installer or use ESET Remote Deployment Tool.
|
|
The installer package is an .exe file for Microsoft Windows only.
|
1.Distribution - Select Download installer or use ESET Remote Deployment Tool.
2.Components - Select one or more check boxes from the following options:
•Management Agent - If you do not select other items in the Components, the installer will include only the ESET Management Agent. Select this option if you want to install the ESET security product on the client computer later or if the client computer already has an ESET security product installed.
•Security Product - Include the ESET security product with the ESET Management Agent. Select this option if the client computer does not have any ESET security product installed, and you want to install it with the ESET Management Agent.
• Full Disk Encryption - Include ESET Full Disk Encryption in the installer. This option is visible only with an active ESET Full Disk Encryption license.
• ESET Inspect Connector - Include ESET Inspect Connector in the installer. This option is visible only with an active ESET Inspect On-Prem license.
|
|
A missing ESET product check box
If the ESET product check box (Full Disk Encryption or ESET Inspect Connector) is missing or deselected automatically after you select the Parent Group, you do not have the product license or the product license is not allocated to the ESET Business Account site or ESET MSP Administrator company for which you have selected the Parent Group, even if you have access rights to the license. Allocate the ESET product license to the site (in ESET Business Account) or company (in ESET MSP Administrator). Then the ESET product check box becomes available, and you can include the ESET product in the installer.
|
3.Select the Participate in product improvement program check box to send anonymous telemetry data and crash report to ESET (OS version and type, ESET product version and other product-specific information).
4.Parent group - Select the Parent group where the ESET PROTECT Web Console will place the computer after an Agent installation.
•You can select an existing static group or create a new one to which the device will be assigned after the installer is deployed.
•Selecting a Parent group will add all policies applied to the group to the installer.
•Selecting the Parent Group does not affect the installer location. After you create the installer, it is placed in the current user's Access Group. Access Group sets the object's Static Group and access to the object based on the user's access rights.
• The parent group is mandatory if you use ESET Business Account with sites or ESET MSP Administrator and optional if you use ESET Business Account without sites.
5.Server hostname (optional) - Type the ESET PROTECT Server hostname or IP address. If necessary, specify the Port number (default is 2222).
|
|
The Server hostname field does not support special characters—for example, letters with diacritics.
|
6.Peer certificate:
•ESET PROTECT certificate - A Peer Certificate for Agent installation and ESET PROTECT Certification Authority are selected automatically. To use a different certificate, click the ESET PROTECT Certificate Description to select from a drop-down menu of available certificates.
•Custom certificate - If you use a custom certificate for authentication, click Custom Certificate > Select , upload the .pfx certificate and select it when installing the Agent. For more information, see Certificates.
Certificate passphrase - Type the certificate passphrase if needed - if you have specified a passphrase during ESET PROTECT Server installation (in the step where you created a Certification Authority) or you use a custom certificate with a passphrase. Otherwise, leave the Certificate passphrase field blank.
|
|
•The certificate passphrase must not contain the following characters: " \ These characters cause a critical error during Agent initialization.
•The password must contain at least 10 characters in three categories: lowercase letters, uppercase letters, digits or special characters. We recommend using a password with no less than 12 characters. |
|
|
You can extract the Certificate passphrase because it is embedded in the installer.
|
7. 
Customize more settings
•Type the Installer name and Description (optional).
•Components installation - Select the Always install the latest available version of products and components check box. The latest version of selected products and components will install on devices connected to the internet. If a device does not have internet access, the version you select in the next step of this wizard is installed. Select this check box to use the installer for a longer time to ensure you always install the latest version of products and components.
• Click Select tags to assign tags.
• Initial configuration (optional) - Use this option to apply a configuration policy to ESET Management Agent. Click Select under Agent configuration and choose from the list of available policies. If none of the pre-defined policies are suitable, you can create a new policy or customize the existing ones.
• If you use an HTTP Proxy (we recommend using ESET Bridge), select the check box Enable HTTP Proxy settings and specify the Proxy settings (Host, Port, Username and Password) to download the installer via Proxy and set ESET Management Agent connection to Proxy to enable communication forwarding between ESET Management Agent and ESET PROTECT Server. The Host field is the address of the machine running the HTTP Proxy. ESET Bridge uses port 3128 by default. You can set a different port if needed. Ensure to set the same port also in the HTTP Proxy configuration (see ESET Bridge Policy).
|
|
The communication protocol between Agent and ESET PROTECT Server does not support authentication. Any proxy solution used for forwarding Agent communication to ESET PROTECT Server that requires authentication will not work.
|
The Use direct connection if HTTP proxy is not available check box is pre-selected. The installer wizard enforces the setting as a fallback—you cannot deselect the check box. You can disable the setting using an ESET Management Agent policy:
oDuring the installer creation—include the policy in the Initial Configuration
oAfter the ESET Management Agent installation—assign the policy to the computer |
8. Click Finish or Product Setup.
9. Security Product
a.Click the pre-selected ESET security product and change its details:
oSelect another compatible ESET security product.
o Select the language from the Language drop-down menu.
oSelect the Advanced check box. By default, the latest version is pre-selected (recommended). You can select an earlier version.
|
|
If you do not see any product installation files, ensure to set the repository to AUTOSELECT. For more information, see the Advanced settings section of Settings.
|
b. Select the check box next to the setting to enable it for the installer:
oEnable The ESET LiveGrid® feedback system (recommended)
oEnable detection of potentially unwanted applications - Read more in our Knowledgebase article.
oAllow to change protection settings during the installation - We recommend that you do not select this check box.
c.Select the check box I accept the End User License Agreement and acknowledge the Privacy Policy. See End User License Agreement (EULA), Terms of Use and Privacy Policy for ESET products.
d.Customize more settings:
oLicense - Select the appropriate product license from the list of available licenses. The license activates the ESET security product during installation. The available licenses list does not show expired and overused licenses (those in the Error or Obsolete state). If you do not select a license, you can install the ESET security product without the license and activate the product later. Use one of the methods described in License Management to add a license. License addition/removal is restricted to the Administrator whose home group is All and who has the Write permission on licenses.
oConfiguration - Optionally, you can select a Policy that will be applied on the ESET security product during its installation.
o Run ESET AV Remover - Select the check box to uninstall or remove other antivirus programs on the target device.
oModules installation - The option may not be available, depending on the selected ESET security product. By default, the product installer contains only the essential ESET modules. The remaining modules are downloaded during the first product startup. Select the Use security product installer with a full set of ESET modules check box to create the installer with all modules (for offline deployments). |
If you have selected Full Disk Encryption or ESET Inspect Connector in step two, you can change their settings.
Full Disk Encryption
a.Click the pre-selected ESET Full Disk Encryption and change its details:
o Select the language from the Language drop-down menu.
oSelect the Advanced check box. By default, the latest version is pre-selected (recommended). You can select an earlier version.
b.Select the check box I accept the End User License Agreement and acknowledge the Privacy Policy. See End User License Agreement (EULA), Terms of Use and Privacy Policy for ESET products.
c.Configuration - Select a policy that will be applied on ESET Full Disk Encryption during its installation.
d.Customize more settings:
oLicense - Select the appropriate product license from the list of available licenses. The license activates the ESET security product during installation. The available licenses list does not show expired and overused licenses (those in the Error or Obsolete state). If you do not select a license, you can install the ESET security product without the license and activate the product later. Use one of the methods described in License Management to add a license. License addition/removal is restricted to the Administrator whose home group is All and who has the Write permission on licenses. |
ESET Inspect Connector
|
|
ESET Inspect Connector requirements:
•You must have an ESET Inspect On-Prem license to activate ESET Inspect Connector.
•A compatible ESET security product installed on the managed computer. |
a.Click the pre-selected ESET Inspect Connector and change its details:
o Select the language from the Language drop-down menu.
oSelect the Advanced check box. By default, the latest version is pre-selected (recommended). You can select an earlier version.
b.Select the check box I accept the End User License Agreement and acknowledge the Privacy Policy. See End User License Agreement (EULA), Terms of Use and Privacy Policy for ESET products.
c.Customize more settings:
oLicense - Select the appropriate product license from the list of available licenses. The license activates the ESET security product during installation. The available licenses list does not show expired and overused licenses (those in the Error or Obsolete state). If you do not select a license, you can install the ESET security product without the license and activate the product later. Use one of the methods described in License Management to add a license. License addition/removal is restricted to the Administrator whose home group is All and who has the Write permission on licenses.
oConfiguration - Click Select to select an existing ESET Inspect Connector policy or Create to create a new ESET Inspect Connector policy. The installer will apply policy settings during the ESET Inspect Connector installation.
oType the ESET Inspect Server hostname and the connection port specified during the ESET Inspect Server installation (the default port is 8093).
oSelect the Certification Authority for connection to the ESET Inspect Server. |
10. Click Finish.
11. Download the generated All-in-one installation package. Select the version you want to deploy:
o32-bit (for example, PROTECT_Installer_x86_en_US.exe)
o64-bit (for example, PROTECT_Installer_x64_en_US.exe)
oARM64 (for example, PROTECT_Installer_arm64.exe) - You cannot install the x86 or x64 version of ESET Management Agent or ESET security product on Windows ARM64.
|
|
All data downloaded from the repository (ESET repository or a custom repository mirror) is digitally signed by ESET and ESET PROTECT Server verifies file hashes and PGP signatures. ESET PROTECT Server generates the All-in-one installer locally. Therefore, the All-in-one installer is not digitally signed, which might generate a web browser warning during the installer download or generate an operating system alert and prevent the installation on systems where unsigned installers are blocked.
|
12. After downloading the All-in-one installer package, you have two deployment options for the ESET Management Agent:
•Locally on a client computer - Run the installation package file on a client computer. It will install the ESET Management Agent and the ESET security product on the device and connect it to ESET PROTECT On-Prem. The ESET Endpoint Antivirus/Security installer created in ESET PROTECT On-Prem supports Windows 10 Enterprise for Virtual Desktops and Windows 10 multi-session mode. For step-by-step instructions, see the Setup Wizard. You can run the installation package in silent mode to hide the Setup Wizard window.
•Use the ESET Remote Deployment Tool to deploy ESET Management Agents to multiple client computers simultaneously.
